Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 28, 2025

This PR contains the following updates:

Package Change Age Confidence
@fullcalendar/core (source) 6.1.15 -> 6.1.19 age confidence
@fullcalendar/daygrid (source) 6.1.15 -> 6.1.19 age confidence
@fullcalendar/interaction (source) 6.1.15 -> 6.1.19 age confidence
@fullcalendar/react (source) 6.1.15 -> 6.1.19 age confidence
@fullcalendar/timegrid (source) 6.1.15 -> 6.1.19 age confidence
@​types/express-rate-limit 6.0.0 -> 6.0.2 age confidence
@types/jest (source) 29.5.13 -> 29.5.14 age confidence
@types/node (source) 22.8.2 -> 22.18.0 age confidence
@types/node-fetch (source) 2.6.11 -> 2.6.13 age confidence
@types/react (source) 18.3.11 -> 18.3.24 age confidence
@types/react-dom (source) 18.3.1 -> 18.3.7 age confidence
dotenv 16.4.5 -> 16.6.1 age confidence
dotenv-webpack 8.1.0 -> 8.1.1 age confidence
express (source) 4.21.1 -> 4.21.2 age confidence
express-rate-limit 7.4.1 -> 7.5.1 age confidence
html-webpack-plugin 5.6.2 -> 5.6.4 age confidence
moment-timezone (source) 0.5.46 -> 0.6.0 age confidence
mysql2 (source) 3.11.3 -> 3.14.3 age confidence
sass 1.80.1 -> 1.91.0 age confidence
sass-loader 16.0.2 -> 16.0.5 age confidence
ts-jest (source) 29.2.5 -> 29.4.1 age confidence
ts-loader 9.5.1 -> 9.5.4 age confidence
typeorm (source) 0.3.20 -> 0.3.26 age confidence
typescript (source) 5.6.3 -> 5.9.2 age confidence
webpack 5.95.0 -> 5.101.3 age confidence
webpack-dev-server 5.2.1 -> 5.2.2 age confidence

See all other Renovate PRs on the Dependency Dashboard


Release Notes

fullcalendar/fullcalendar (@​fullcalendar/core)

v6.1.19

Compare Source

  • feature: Angular 20 support (#​7946)
  • feature: setting to control how nowIndicator displays in all-day slots (#​6175)
    (nowIndicatorSnap. use false to ensure time-granularity always)
  • fix: allow business hours that START past midnight (#​7934)

v6.1.18

Compare Source

  • fix: Optimize custom content-injection rerendering performance (#​3003, #​7650)
    (Especially important for event rerendering with eventContent)

v6.1.17

Compare Source

  • fix: recurring event start/end time not updated when timezone changed (#​5273)
  • fix: nowIndicator not updated when timezone changed (#​5753)
  • fix: nowIndicator lags after returning to suspended tab (#​7806)
  • fix: "today" date does not update after current time crosses midnight (#​3783)
  • fix: day header 1 day behind with Luxon & timezone with midnight DST (#​7633)
  • fix: in timeline, incorrect navLink for granularities other than day/week (#​4931)
  • fix: validRange in multiMonth view does not render all the days (#​7287)
Angular
fullcalendar/fullcalendar-react (@​fullcalendar/react)

v6.1.19

Compare Source

See https://github.com/fullcalendar/fullcalendar/releases/tag/v6.1.19

v6.1.18

Compare Source

See https://github.com/fullcalendar/fullcalendar/releases/tag/v6.1.18

v6.1.17

Compare Source

See https://github.com/fullcalendar/fullcalendar/releases/tag/v6.1.17

motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed
  • Default quiet to true – hiding the runtime log message (#​874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@​dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added
  • Default log helpful message [[email protected]] injecting env (1) from .env (#​870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added
  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed
  • Remove _log method. Use _debug #​862

v16.4.7

Compare Source

Changed
  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #​848

v16.4.6

Compare Source

Changed
  • Clean up stale dev dependencies #​847
  • Various README updates clarifying usage and alternative solutions using dotenvx
mrsteele/dotenv-webpack (dotenv-webpack)

v8.1.1

Compare Source

Bug Fixes
expressjs/express (express)

v4.21.2

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

express-rate-limit/express-rate-limit (express-rate-limit)

v7.5.1

Compare Source

Changed
  • Narrowed type of standardHeaders from string to just the supported values via a TypeScript const assertion (#​506)

You can view the full changelog here.

v7.5.0

Compare Source

Added
  • Implemented the combined RateLimit header according to the eighth draft of the IETF RateLimit header specificiation. Enable by setting standardHeaders: 'draft-8'.
  • Added a new identifier option, used as the name for the quota policy in the draft-8 headers.
  • Added a new headersDraftVersion validation check to identifies cases where an unsupported version string is passed to the standardHeaders option.

You can view the full changelog here.

jantimon/html-webpack-plugin (html-webpack-plugin)

v5.6.4

Compare Source

v5.6.3

Compare Source

moment/moment-timezone (moment-timezone)

v0.6.0

Compare Source

  • Fixed and updated TypeScript definitions. #​1132
    • Updated types to more accurately match the code implementation.
    • Added definitions for pre-built files (e.g. moment-timezone-with-data.js).

This release is a potential breaking change for TypeScript projects only.
The types are now more accurate, but consumers might hit errors if they were relying on the more relaxed types.

No implementation code has changed in this release.

v0.5.48

Compare Source

  • Updated data to IANA TZDB 2025b. #​1130

v0.5.47

Compare Source

  • Updated data to IANA TZDB 2025a. #​1125
sidorares/node-mysql2 (mysql2)

v3.14.3

Compare Source

Bug Fixes
  • resolve parser cache collision with dual typeCast connections (#​3644) (ce2ad75)

v3.14.2

Compare Source

Bug Fixes

v3.14.1

Compare Source

Miscellaneous Chores

v3.14.0

Compare Source

Features

v3.13.0

Compare Source

Features
Bug Fixes
  • PromisePoolCluster.of returns PromisePoolCluster instead of PoolNamespace (#​3261) (be22202)
  • query: support VECTOR packets in static parser (#​3379) (603c246)

v3.12.0

Compare Source

Features

v3.11.5

Compare Source

Bug Fixes

v3.11.4

Compare Source

Bug Fixes
  • types: correct TypeCast's Next callback to return unknown (#​3129) (401db79)
sass/dart-sass (sass)

v1.91.0

Compare Source

  • Potentially breaking change: meta.inspect() (as well as other systems
    that use it such as @debug and certain error messages) now emits numbers
    with as high precision as is available instead of rounding to the nearest
    1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of
    meta.inspect(), which is to provide full information about the structure of
    a Sass value.

  • Passing a rest argument ($arg...) before a positional or named argument when
    calling a function or mixin is now deprecated. This was always outside the
    specified syntax, but it was historically treated the same as passing the rest
    argument at the end of the argument list whether or not that matched the
    visual order of the arguments.

v1.90.0

Compare Source

  • Allow a @forwarded module to be loaded with a configuration when that module
    has already been loaded with a different configuration and the module
    doesn't define any variables that would have been configured anyway.

v1.89.2

Compare Source

Embedded Host
  • Fixed a compilation error caused by an outdated buf dependency.

v1.89.1

Compare Source

  • No user-visible changes.

v1.89.0

Compare Source

  • Allow the Node package importer to load files even when there are multiple
    potential resolutions, as long as those resolutions all point to the same
    file.

v1.88.0

Compare Source

  • Allow custom properties with empty values (such as --var:;).

  • Fix a bug when calculating source spans for interpolations.

Dart and JS APIs
  • Potentially breaking bug fix: Throw an error when passing a function or
    mixin object from one compilation to another.
Dart API
  • Deprecate passing a relative URL to compileString() and related functions.

v1.87.0

Compare Source

  • Potentially breaking bug fix: When a plain CSS file with a top-level
    nesting selector & is loaded into a nested Sass context via
    meta.load-css() or @import, Sass now emits plain CSS nesting rather than
    incorrectly combining it with the parent selector using a descendant
    combinator.

v1.86.3

Compare Source

  • Fix a bug introduced in 1.86.1 where Sass fails to resolve paths starting with
    a .. segment.

v1.86.2

Compare Source

  • No user-visible changes.

v1.86.1

Compare Source

  • Improve the performance of file: URL case canonicalization on Windows and
    Mac OS.

v1.86.0

Compare Source

  • Add support for % as an expression in its own right. It will still be parsed
    as the modulo operator when between two other expressions, but in any other
    context it will be an expression whose value is the unquoted string %.

  • Consider attr() to be a special number function that can be used as a
    channel in color functions.

  • Deprecate user-defined functions named type() so that we can eventually
    support the new CSS type() function.

Dart API
  • Increase the minimum Dart SDK to 3.6.0.

v1.85.1

Compare Source

  • Fix a bug where global Sass functions whose names overlap with CSS math
    functions could incorrectly be treated as CSS math functions even though they
    used Sass-only features, causing compilation failures. For example,
    round(-$var / 2) previously threw an error but now works as intended.

v1.85.0

Compare Source

  • No longer fully trim redundant selectors generated by @extend. This caused
    unacceptable performance issues for certain heavy users of @extend. We'll
    try to find a more performant way to accomplish it in the future.

v1.84.0

Compare Source

  • Allow newlines in whitespace in the indented syntax.

  • Potentially breaking bug fix: Selectors with unmatched brackets now always
    produce a parser error. Previously, some edge cases like [foo#{"]:is(bar"}) {a: b} would compile without error, but this was an unintentional bug.

  • Fix a bug in which various Color Level 4 functions weren't allowed in plain
    CSS.

  • Fix the error message for @extend without a selector and possibly other
    parsing edge-cases in contexts that allow interpolation.

Embedded Host
  • Fixed the implementation of the SassBoolean type to adhere to the spec,
    now using a class instead of an interface.

v1.83.4

Compare Source

  • No user-visible changes.

v1.83.3

Compare Source

  • No user-visible changes.

v1.83.2

Compare Source

  • Properly display deprecation IDs for the JS Sass API.

  • Don't display deprecation IDs for user-defined deprecations.

v1.83.1

Compare Source

  • Fix a bug where --quiet-deps would get deactivated for @content blocks,
    even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine
    what to pass to --silence-deprecation or --fatal-deprecation.

v1.83.0

Compare Source

  • Allow trailing commas in all argument and parameter lists.

v1.82.0

Compare Source

Command-Line Interface
  • Improve --watch mode reliability when making multiple changes at once, such
    as checking out a different Git branch.

  • Parse the calc-size() function as a calculation now that it's supported in
    some browsers.

Dart API
  • Add a SassCalculation.calcSize() function.

v1.81.1

Compare Source

  • No user-visible changes.

v1.81.0

Compare Source

  • Fix a few cases where deprecation warnings weren't being emitted for global
    built-in functions whose names overlap with CSS calculations.

  • Add support for the CSS round() calculation with a single argument, as long
    as that argument might be a unitless number.

v1.80.7

Compare Source

Embedded Host
  • Don't treat 0 as undefined for the green and blue channels in the
    LegacyColor constructor.

v1.80.6

Compare Source

Command-Line Interface
  • Make @parcel/watcher an optional dependency so this can still be installed
    on operating systems where it's unavailable.

v1.80.5

Compare Source

Embedded Host
  • Don't produce phantom @import deprecations when using an importer with the
    legacy API.

v1.80.4

Compare Source

  • No user-visible changes.

v1.80.3

Compare Source

  • Fix a bug where @import url("...") would crash in plain CSS files.

  • Improve consistency of how warnings are emitted by different parts of the
    compiler. This should result in minimal user-visible changes, but different
    types of warnings should now respond more reliably to flags like --quiet,
    --verbose, and --silence-deprecation.

v1.80.2

Compare Source

  • Fix a bug where deprecation warnings were incorrectly emitted for the
    plain-CSS invert() function.
webpack-contrib/sass-loader (sass-loader)

v16.0.5

Compare Source

v16.0.4

Compare Source

v16.0.3

Compare Source

kulshekhar/ts-jest (ts-jest)

v29.4.1

Compare Source

v29.4.0

Compare Source

Features

v29.3.4

Compare Source

Bug Fixes
  • fix: fix TsJestTransformerOptions type (3b11e29), closes #​4247
  • fix(cli): fix wrong path for preset creator fns (249eb2c)
  • fix(config): disable rewriteRelativeImportExtensions always (9b1f472), closes #​4855

v29.3.3

Compare Source

Bug Fixes

v29.3.2

Compare Source

Bug Fixes
  • fix: transpile js files from node_modules whenever Jest asks (968370e), closes #​4637

v29.3.1

Compare Source

Bug Fixes
  • fix: allow isolatedModules mode to have ts.Program under Node16/Next (25157eb)
  • fix: improve message for isolatedModules of ts-jest config (547eb6f)

v29.3.0

Compare Source

Features
  • feat: support hybrid module values for isolatedModules: true (f372121)
Bug Fixes
  • fix: set customConditions to undefined in TsCompiler (b091d70), closes #​4620
Code Refactoring
  • refactor: remove manual version checker (89458fc)
  • refactor: remove patching deps based on version checker (bac4c43)
  • refactor: deprecate RawCompilerOptions interface (2b1b6cd)
  • refactor: deprecate transform option isolatedModules (7dfef71)

v29.2.6

Compare Source

TypeStrong/ts-loader (ts-loader)

v9.5.4

Compare Source

Skipping 9.5.3 due to a publishing issue

v9.5.2

Compare Source

typeorm/typeorm (typeorm)

v0.3.26

Compare Source

Notes:

  • When using MySQL, TypeORM now connects using stringifyObjects: true, in order to avoid a potential security vulnerability
    in the mysql/mysql2 client libraries. You can revert to the old behavior by setting connectionOptions.extra.stringifyObjects = false.
  • When using SAP HANA, TypeORM now uses the built-in pool from the @sap/hana-client library. The deprecated hdb-pool
    is no longer necessary and can be removed. See https://typeorm.io/docs/drivers/sap/#data-source-options for the new pool options.
Bug Fixes
Features
Performance Improvements

v0.3.25

Compare Source

Bug Fixes
Features

v0.3.24

Compare Source

Bug Fixes
Features
  • add tagged template for executing raw SQL queries (#​11432) (c464ff8)
  • add updateAll and deleteAll methods to EntityManager and Repository APIs ([#​11459](htt

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) August 28, 2025 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant